← All advisories

Unrated severityNVD Advisory· Published Oct 21, 2025· Updated Oct 21, 2025

OS command injection using information obtained from the web management interface

CVE-2025-6541

Description

An arbitrary OS command may be executed on the product by the user who can log in to the web management interface.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

TP-Link Systems Inc./Festa gatewaysv5
Range: 0
TP-Link/Omada Gatewaycpe-rescue2 versions
0+ 1 more
- (no CPE)range: 0
- (no CPE)range: 0

Patches

Vulnerability mechanics

References

4

support.omadanetworks.com/en/document/108455/mitrevendor-advisory
www.omadanetworks.com/us/business-networking/all-omada-router/mitreproduct
www.omadanetworks.com/us/business-networking/omada-pro-router-wired-router/mitreproduct
www.tp-link.com/us/business-networking/soho-festa-gateway/mitreproduct

News mentions

0

No linked articles in our index yet.